Just make sure whenever you are forced to use these services, like I do, that you also request for their privacy policy. Then, after you've finished using the service and you don't want them to keep your data, request they remove it and delete it permanently with proof. Otherwise, you threaten them (and this is real) with reporting to EU (even if you're not EU but the service serves EU people then it has to comply). This is privacy legislation that works these days.
It works for me at one exchange I didn't use anymore. They deleted and showed proof. Doesn't mean it's really gone but I feel better about it.